Is CVE-2024-20271 being actively exploited?

CVE-2024-20271 is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

What is the CVSS score for CVE-2024-20271?

CVE-2024-20271 has a CVSS 3.1 base score of 8.6 (HIGH).

CVE-2024-20271

HIGH · CVSS 8.6EPSS 0.6%EU EUVD

A vulnerability in the IP packet processing of Cisco Access Point (AP) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient input validation of certain IPv4 packets. An attacker could exploit this vulnerability by sending a crafted IPv4 packet either to or through an affected device. A successful exploit could allow the attacker to cause an affected device to reload unexpectedly, resulting in a DoS condition. To successfully exploit this vulnerability, the attacker does not need to be associated with the affected AP. This vulnerability cannot be exploited by sending IPv6 packets.

Key facts

CVSS score: 8.6 (v3.1)
Severity: HIGH
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Weakness (CWE): CWE-20
EPSS score: 0.6% (49th percentile)
In CISA KEV: No
In EU EUVD: Yes (EUVD-2024-17986)
Published: March 27, 2024
NVD last modified: June 17, 2026
Status: Analyzed

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2024-17986 in the EU Vulnerability Database. Last updated in EUVD on August 1, 2024.

View on the EU Vulnerability Database

Affected products

cisco / business 140ac
cisco / business 140ac access point
cisco / business 141acm
cisco / business 142acm
cisco / business 143acm
cisco / business 145ac
cisco / business 145ac access point
cisco / business 150ax
cisco / business 150ax access point
cisco / business 151axm
cisco / business 240ac
cisco / business access points
cisco / ios xe
cisco / wireless lan controller software

Certified products that may be affected

29 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.

Cisco Embedded Services 9300 and 3300 Series Switches (ESS9300 & ESS3300) running IOS-XE 17.12 - Cisco Systems, Inc. - Common Criteria CCEVS-VR-VID-11521-2025 - active
Cisco cEdge Routers running IOS XE 17.12 with SD-WAN 20.12 - Cisco Systems, Inc. - Common Criteria 654-LSS - active
Cisco Catalyst Industrial Ethernet 3100 (IE3100) Rugged Series Switches running IOS-XE 17.12 - Cisco Systems, Inc. - Common Criteria CCEVS-VR-VID-11490-2024 - archived
Cisco Catalyst Industrial Ethernet 9300 Rugged Series Switches running IOS-XE 17.12 - Cisco Systems, Inc. - Common Criteria CCEVS-VR-VID-11466-2024 - archived
Cisco Catalyst Industrial Ethernet 3200, 3300, 3400, 3400H (IE3x00) Rugged Series Switches running IOS-XE 17.12 - Cisco Systems, Inc. - Common Criteria CCEVS-VR-VID-11443-2024 - archived

See all 29 in the Security Certifications Explorer.

References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ap-dos-h9TGGX6W(Vendor Advisory)

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain